1. Home
  2. CVE Database
  3. CVE-2023-1749
MEDIUM · 6.5

CVE-2023-1749

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would exe...

Vulnerability Description

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
GetnexxNxal-100 Firmware<= nxal100v-p1-9-1
GetnexxNxal-100-
GetnexxNxg-100B Firmware<= nxg100bv-p3-4-1
GetnexxNxg-100B-
GetnexxNxpg-100W Firmware<= nxpg100cv4-0-0
GetnexxNxpg-100W-
GetnexxNxg-200 Firmware<= nxg200v-p3-4-1
GetnexxNxg-200-

Related Weaknesses (CWE)

CWE-639

References

FAQ

What is CVE-2023-1749?

CVE-2023-1749 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would exe...

How severe is CVE-2023-1749?

CVE-2023-1749 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-1749?

Check the references section above for vendor advisories and patch information. Affected products include: Getnexx Nxal-100 Firmware, Getnexx Nxal-100, Getnexx Nxg-100B Firmware, Getnexx Nxg-100B, Getnexx Nxpg-100W Firmware.